last executing test programs: 16.732061872s ago: executing program 3 (id=409): symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0xfc, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 14.071988234s ago: executing program 1 (id=415): socket(0x1, 0x803, 0x20) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), r0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x14, r1, 0x3, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 13.150718802s ago: executing program 1 (id=417): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c) getdents64(r6, &(0x7f0000000000)=""/49, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) 13.057821976s ago: executing program 3 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4cc5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 12.935582499s ago: executing program 2 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) r6 = semget$private(0x0, 0x4, 0xe15) semctl$IPC_RMID(r6, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) 10.819085325s ago: executing program 2 (id=420): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x3, 0x2, 0x100, "1c1e00000140795800040000000000000003000000002000", 0x32314742}) 10.789427346s ago: executing program 1 (id=421): socket(0x1, 0x803, 0x20) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), r0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x14, r1, 0x3, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 10.218023303s ago: executing program 3 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x3, 0x2, 0x100, "1c1e00000140795800040000000000000003000000002000", 0x32314742}) 9.109180787s ago: executing program 0 (id=424): r0 = io_uring_setup(0x28a6, &(0x7f0000000200)={0x0, 0xfffffffd, 0x2, 0x0, 0x6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_enter(r0, 0x785e, 0x90f3, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 7.567443315s ago: executing program 3 (id=425): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04", 0xa5, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.551035656s ago: executing program 0 (id=426): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000002300), 0x0, 0x40002021, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01864ba, &(0x7f0000002b00)={0x2}) setsockopt$inet6_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c458", 0x10) 6.77724607s ago: executing program 1 (id=427): symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0xfc, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 6.11949922s ago: executing program 0 (id=428): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB]) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=0xffffffffffffffff, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0}}, 0x30) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x51, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000180)=0xa4) syslog(0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) 5.427929612s ago: executing program 3 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x40000000, 0x0) ptrace$cont(0x9, r3, 0x7, 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x0, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 4.548846648s ago: executing program 0 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000d00)="e87b7385eb488997050a35a3e13f", 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 4.377826054s ago: executing program 2 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4cc5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 3.014990266s ago: executing program 2 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) r4 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000040), 0x3e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x5381, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(r6, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}, {0x0}], 0x2, 0xffffff01, 0xa) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='no']) 2.934975139s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x3, 0x2, 0x100, "1c1e00000140795800040000000000000003000000002000", 0x32314742}) 2.741185115s ago: executing program 1 (id=434): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.694671996s ago: executing program 0 (id=435): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x200200, 0x0, 0x5a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) listxattr(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000006200), &(0x7f0000006240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$fscrypt_provisioning(&(0x7f0000006100), &(0x7f0000006140)={'syz', 0x3}, &(0x7f0000006180)={0x1, 0x0, @a}, 0x48, r6) keyctl$unlink(0x9, r7, r6) keyctl$unlink(0x9, r6, r6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1.040279018s ago: executing program 0 (id=436): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x3, 0x2, 0x100, "1c1e00000140795800040000000000000003000000002000", 0x32314742}) 1.038611628s ago: executing program 2 (id=437): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04", 0xa5, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 981.596889ms ago: executing program 1 (id=438): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000440)={r2, &(0x7f00000003c0)=""/61}) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000ffffffe900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="00539d8d4dc2e7e43dde3f12191c", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r7, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xf2, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x4d, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000001540)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0xfe, &(0x7f00000005c0)=""/254, 0x40f00, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xe, 0x6, 0xf2d2}, 0x10, r8, r9, 0x1, &(0x7f0000000b80)=[r6], &(0x7f0000000bc0)=[{0x1, 0x4, 0xe, 0x8}], 0x10, 0x2000004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000006039c9430000000000000000181100006f728634dd7a0ab29c6282407780b027d66e7ba822b40ea8288c59ad91ba71f5c29ceaee6a00"/69, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 0s ago: executing program 2 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) eventfd2(0x5, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 63.070008][ T5761] cgroup: Unknown subsys name 'net' [ 63.232760][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.595745][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.753480][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.773495][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.781632][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.789058][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.790900][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.804214][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.804633][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.811762][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.820083][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.826809][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.833707][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.841166][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.846796][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.854223][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.860938][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.868035][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.874775][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.888790][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.889518][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.896105][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.910568][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.918642][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.946439][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.954526][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.335867][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 67.359772][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.448939][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 67.463076][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 67.550140][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.557862][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.565114][ T5773] bridge_slave_0: entered allmulticast mode [ 67.572251][ T5773] bridge_slave_0: entered promiscuous mode [ 67.599237][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.606352][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.614009][ T5772] bridge_slave_0: entered allmulticast mode [ 67.620886][ T5772] bridge_slave_0: entered promiscuous mode [ 67.629272][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.636377][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.647460][ T5773] bridge_slave_1: entered allmulticast mode [ 67.654195][ T5773] bridge_slave_1: entered promiscuous mode [ 67.681290][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.688586][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.695708][ T5772] bridge_slave_1: entered allmulticast mode [ 67.702976][ T5772] bridge_slave_1: entered promiscuous mode [ 67.742987][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.755566][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.821487][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.840248][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.847538][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.854668][ T5775] bridge_slave_0: entered allmulticast mode [ 67.862232][ T5775] bridge_slave_0: entered promiscuous mode [ 67.869406][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.877289][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.884548][ T5774] bridge_slave_0: entered allmulticast mode [ 67.891356][ T5774] bridge_slave_0: entered promiscuous mode [ 67.900104][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.922774][ T5773] team0: Port device team_slave_0 added [ 67.928923][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.936050][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.943834][ T5775] bridge_slave_1: entered allmulticast mode [ 67.950686][ T5775] bridge_slave_1: entered promiscuous mode [ 67.967999][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.975077][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.983936][ T5774] bridge_slave_1: entered allmulticast mode [ 67.991197][ T5774] bridge_slave_1: entered promiscuous mode [ 68.023197][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.034716][ T5773] team0: Port device team_slave_1 added [ 68.062895][ T5772] team0: Port device team_slave_0 added [ 68.071007][ T5772] team0: Port device team_slave_1 added [ 68.087174][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.115284][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.127813][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.134770][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.161036][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.174422][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.181490][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.207428][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.226005][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.233673][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.259833][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.281857][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.315613][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.322661][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.348613][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.391341][ T5774] team0: Port device team_slave_0 added [ 68.413144][ T5772] hsr_slave_0: entered promiscuous mode [ 68.419511][ T5772] hsr_slave_1: entered promiscuous mode [ 68.434581][ T5774] team0: Port device team_slave_1 added [ 68.470280][ T5775] team0: Port device team_slave_0 added [ 68.478625][ T5775] team0: Port device team_slave_1 added [ 68.503779][ T5773] hsr_slave_0: entered promiscuous mode [ 68.510514][ T5773] hsr_slave_1: entered promiscuous mode [ 68.517796][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.525543][ T5773] Cannot create hsr debugfs directory [ 68.571214][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.578436][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.604363][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.621572][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.629084][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.655611][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.667776][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.674727][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.700746][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.745364][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.752456][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.781434][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.887061][ T5774] hsr_slave_0: entered promiscuous mode [ 68.893386][ T5774] hsr_slave_1: entered promiscuous mode [ 68.902191][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.910290][ T5774] Cannot create hsr debugfs directory [ 68.917389][ T5785] Bluetooth: hci0: command tx timeout [ 68.934008][ T5775] hsr_slave_0: entered promiscuous mode [ 68.942755][ T5775] hsr_slave_1: entered promiscuous mode [ 68.949685][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.957340][ T5775] Cannot create hsr debugfs directory [ 68.991194][ T5785] Bluetooth: hci2: command tx timeout [ 68.996895][ T5785] Bluetooth: hci1: command tx timeout [ 69.002666][ T5785] Bluetooth: hci3: command tx timeout [ 69.262394][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.274991][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.284169][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.295273][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.371633][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.385788][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.398796][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.416037][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.485634][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.502444][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.513171][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.522828][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.602662][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.648713][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.659190][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.678048][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.684888][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.695672][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.725504][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.732842][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.753078][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.760333][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.846698][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.905909][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.930191][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.939246][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.946376][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.965283][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.972468][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.010514][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.068792][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.088757][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.140350][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.147498][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.162467][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.169630][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.180661][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.187756][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.198922][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.205993][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.448199][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.566081][ T5772] veth0_vlan: entered promiscuous mode [ 70.604142][ T5772] veth1_vlan: entered promiscuous mode [ 70.663426][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.709640][ T5772] veth0_macvtap: entered promiscuous mode [ 70.749290][ T5772] veth1_macvtap: entered promiscuous mode [ 70.792244][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.811810][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.822770][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.849495][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.858879][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.867681][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.877131][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.893576][ T5773] veth0_vlan: entered promiscuous mode [ 70.928154][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.939990][ T5773] veth1_vlan: entered promiscuous mode [ 70.987549][ T5785] Bluetooth: hci0: command tx timeout [ 71.025809][ T5775] veth0_vlan: entered promiscuous mode [ 71.069897][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.069995][ T5785] Bluetooth: hci3: command tx timeout [ 71.080123][ T5773] veth0_macvtap: entered promiscuous mode [ 71.083344][ T5783] Bluetooth: hci1: command tx timeout [ 71.089275][ T51] Bluetooth: hci2: command tx timeout [ 71.106186][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.121945][ T5775] veth1_vlan: entered promiscuous mode [ 71.136025][ T5773] veth1_macvtap: entered promiscuous mode [ 71.172093][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.183118][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.195286][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.211611][ T5774] veth0_vlan: entered promiscuous mode [ 71.223656][ T5774] veth1_vlan: entered promiscuous mode [ 71.250058][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.259174][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.269867][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.271559][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.289258][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.306152][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.317567][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.326985][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.336074][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.383514][ T5775] veth0_macvtap: entered promiscuous mode [ 71.394737][ T5774] veth0_macvtap: entered promiscuous mode [ 71.413324][ T5775] veth1_macvtap: entered promiscuous mode [ 71.447871][ T5774] veth1_macvtap: entered promiscuous mode [ 71.478242][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.484860][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.504927][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.517222][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.527368][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.538226][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.559147][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.584071][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.595894][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.607805][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.618732][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.622039][ T5841] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.630007][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.649508][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.659714][ T5841] input: syz0 as /devices/virtual/input/input5 [ 71.662658][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.690383][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.702650][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.727008][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.737735][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.750215][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.781369][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.792962][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.805478][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.815462][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.815660][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.836961][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.847171][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.857833][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.882828][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.893467][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.905212][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.916409][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.947277][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.975236][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.984960][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.997676][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.000189][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.006378][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.072328][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.092038][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.295307][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.311222][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.370327][ T5854] syz.1.2[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.382692][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.407377][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.411252][ T5854] loop1: detected capacity change from 0 to 128 [ 72.446089][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.483619][ T5854] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.498104][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.516883][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.525429][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.570680][ T5854] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.216693][ T51] Bluetooth: hci2: command tx timeout [ 73.222289][ T51] Bluetooth: hci3: command tx timeout [ 73.296848][ T5864] syz.1.2 (pid 5864) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 74.051791][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.187209][ T5783] Bluetooth: hci1: command tx timeout [ 76.585008][ T51] Bluetooth: hci0: command tx timeout [ 76.603383][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 76.637734][ T5877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.702295][ T51] Bluetooth: hci3: command tx timeout [ 76.714983][ T5783] Bluetooth: hci2: command tx timeout [ 76.972704][ T5882] bridge_slave_0: left allmulticast mode [ 76.983700][ T5882] bridge_slave_0: left promiscuous mode [ 76.991953][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.071307][ T5882] bridge_slave_1: left allmulticast mode [ 77.077224][ T5882] bridge_slave_1: left promiscuous mode [ 77.083027][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.146426][ T5882] bond0: (slave bond_slave_0): Releasing backup interface [ 77.920158][ T5882] bond0: (slave bond_slave_1): Releasing backup interface [ 78.082106][ T5882] team0: Port device team_slave_0 removed [ 78.099023][ T5882] team0: Port device team_slave_1 removed [ 78.105302][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.113950][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.144147][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.152568][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.595489][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.614820][ T5903] process 'syz.2.19' launched './file1' with NULL argv: empty string added [ 78.626951][ T5903] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.868623][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.878015][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.879306][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 79.895136][ T5918] Zero length message leads to an empty skb [ 80.052034][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.662547][ T5921] loop1: detected capacity change from 0 to 164 [ 80.839594][ T5921] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 81.532962][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 81.728021][ T787] cfg80211: failed to load regulatory.db [ 83.879225][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 83.931988][ T5936] bridge_slave_0: left allmulticast mode [ 83.946256][ T5936] bridge_slave_0: left promiscuous mode [ 83.960758][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.983554][ T5936] bridge_slave_1: left allmulticast mode [ 84.018131][ T5936] bridge_slave_1: left promiscuous mode [ 84.023855][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.047622][ T5936] bond0: (slave bond_slave_0): Releasing backup interface [ 84.087751][ T5936] bond0: (slave bond_slave_1): Releasing backup interface [ 84.143940][ T5936] team0: Port device team_slave_0 removed [ 84.168655][ T5936] team0: Port device team_slave_1 removed [ 84.184702][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.202969][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.222091][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.234482][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.349701][ T5962] vivid-003: disconnect [ 86.430610][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.167158][ T5967] xt_bpf: check failed: parse error [ 87.376238][ T5955] vivid-003: reconnect [ 87.946736][ T5978] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 88.640937][ T5984] loop1: detected capacity change from 0 to 128 [ 88.742893][ T5988] random: crng reseeded on system resumption [ 90.378943][ T5998] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 90.387207][ T5998] FAT-fs (loop1): Filesystem has been set read-only [ 90.396740][ T5998] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 90.429766][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 91.429964][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 91.678384][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 92.731451][ T6068] xt_bpf: check failed: parse error [ 92.887061][ T6069] tipc: Started in network mode [ 92.907402][ T6069] tipc: Node identity 4, cluster identity 4711 [ 92.942384][ T6069] tipc: Node number set to 4 [ 97.727040][ T6099] sched: RT throttling activated [ 99.864531][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'. [ 100.721792][ T6112] loop2: detected capacity change from 0 to 4096 [ 100.756284][ T6112] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 100.768196][ T6112] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.784191][ T6112] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 100.795828][ T6112] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.809152][ T6112] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.828430][ T6112] ntfs: volume version 3.1. [ 100.863318][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 100.868539][ T6112] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 100.880060][ T9] IPVS: starting estimator thread 0... [ 100.884941][ T6112] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 100.905218][ T6112] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.920367][ T6112] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.932554][ T6112] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 101.174042][ T6115] IPVS: using max 18 ests per chain, 43200 per kthread [ 101.823766][ T6128] netlink: 'syz.3.54': attribute type 12 has an invalid length. [ 102.081157][ T6134] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.944884][ T6141] netlink: 'syz.2.58': attribute type 10 has an invalid length. [ 102.964919][ T6141] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.496985][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 104.099007][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 104.172773][ T9] IPVS: starting estimator thread 0... [ 104.488130][ T6153] IPVS: using max 21 ests per chain, 50400 per kthread [ 106.133332][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 106.595565][ T6178] netlink: 'syz.2.68': attribute type 12 has an invalid length. [ 106.724246][ T6178] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.209884][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 111.279545][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 112.410245][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 112.544678][ T6227] netlink: 'syz.0.80': attribute type 12 has an invalid length. [ 112.586388][ T6227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.579462][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.564934][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 115.263696][ T6251] netlink: 'syz.1.85': attribute type 10 has an invalid length. [ 115.329441][ T6251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.346631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 117.145505][ T6268] x_tables: duplicate underflow at hook 1 [ 120.337777][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'. [ 122.078708][ T6302] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 122.111607][ T6302] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.650218][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 122.759857][ T787] Process accounting resumed [ 125.285520][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 126.651603][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 128.432942][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 129.577437][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.869278][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.062247][ T787] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 130.222332][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.324864][ T787] usb 4-1: Product: syz [ 130.384502][ T787] usb 4-1: Manufacturer: syz [ 130.434812][ T787] usb 4-1: SerialNumber: syz [ 130.727707][ T6398] warning: `syz.1.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.437880][ T787] usb 4-1: can't set config #1, error -71 [ 131.525409][ T787] usb 4-1: USB disconnect, device number 2 [ 132.297011][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 132.305950][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 133.022410][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 133.033881][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042833][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.272444][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 134.806636][ T5822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.661186][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.796905][ T5822] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 135.808108][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.911530][ T5822] usb 1-1: Product: syz [ 135.916104][ T5822] usb 1-1: Manufacturer: syz [ 135.923623][ T5822] usb 1-1: SerialNumber: syz [ 136.868929][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 136.935888][ T6437] netlink: 180 bytes leftover after parsing attributes in process `syz.0.137'. [ 137.915019][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 137.965864][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 138.053890][ T5822] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 138.256514][ C1] hrtimer: interrupt took 50872 ns [ 138.838558][ T5822] usb 1-1: USB disconnect, device number 2 [ 138.971176][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 139.240092][ T6488] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 139.957978][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.960341][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 140.258756][ T6500] tipc: Started in network mode [ 140.263687][ T6500] tipc: Node identity 84e, cluster identity 4711 [ 140.290998][ T6500] tipc: Node number set to 2126 [ 141.884471][ T6518] loop2: detected capacity change from 0 to 256 [ 142.765590][ T6518] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 144.506641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 145.676232][ T6531] tipc: Failed to remove unknown binding: 66,1,1/2126:1219367522/1219367524 [ 146.356778][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 146.456888][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 146.466079][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 146.476007][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 147.607569][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 148.528010][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 149.176131][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 151.300778][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 152.980162][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 153.115084][ T6606] loop1: detected capacity change from 0 to 164 [ 153.483659][ T6611] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6611] [ 154.589295][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 154.648111][ T6617] loop3: detected capacity change from 0 to 8192 [ 154.678720][ T6617] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 156.147185][ T6617] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 156.159876][ T6617] REISERFS (device loop3): using ordered data mode [ 156.166418][ T6617] reiserfs: using flush barriers [ 156.201353][ T6617] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.247477][ T6617] REISERFS (device loop3): checking transaction log (loop3) [ 156.836724][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 156.932122][ T6617] REISERFS (device loop3): Using r5 hash to sort names [ 156.948787][ T6617] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 158.524263][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 159.844977][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 160.077662][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 160.764453][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 161.720507][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 163.056341][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 163.264812][ T6691] loop3: detected capacity change from 0 to 32768 [ 163.656864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.803181][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.046053][ T6698] Bluetooth: MGMT ver 1.22 [ 164.135589][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.160683][ T6050] read_mapping_page failed! [ 164.165610][ T6050] ERROR: (device loop3): txCommit: [ 164.165610][ T6050] [ 164.203216][ T6050] jfs_write_inode: jfs_commit_inode failed! [ 164.276600][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.289147][ T967] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 165.140294][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.179354][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 165.214702][ T967] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 165.255950][ T967] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 165.410285][ T967] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.419809][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.428104][ T967] usb 3-1: Product: syz [ 165.432697][ T967] usb 3-1: Manufacturer: syz [ 165.439893][ T967] usb 3-1: SerialNumber: syz [ 165.571064][ T6050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.647380][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.675131][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.107003][ T5785] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.114789][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.208932][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.515514][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 167.530510][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.543842][ T967] usb 3-1: USB disconnect, device number 2 [ 169.392236][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 169.714881][ T5819] net_ratelimit: 2 callbacks suppressed [ 169.714897][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.289332][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 170.595252][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.754631][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.846745][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.904467][ T6751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.308352][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.328051][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.362034][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.707599][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.796667][ T967] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.866633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.996643][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 172.016235][ T967] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 172.047738][ T967] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 172.093127][ T967] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 172.114147][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.124254][ T967] usb 4-1: Product: syz [ 172.132153][ T967] usb 4-1: Manufacturer: syz [ 172.139564][ T967] usb 4-1: SerialNumber: syz [ 172.355769][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 173.694620][ T967] usb 4-1: USB disconnect, device number 3 [ 174.177161][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 174.787834][ T6782] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 174.796422][ T6782] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 174.805237][ T6782] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 174.974707][ T5818] net_ratelimit: 14 callbacks suppressed [ 174.974730][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.093810][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.541615][ T6785] netlink: 'syz.1.220': attribute type 12 has an invalid length. [ 175.554478][ T6785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.427707][ T6050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.720305][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.728821][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.736986][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.745380][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.756757][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.848750][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 176.906747][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.795002][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.386815][ T6808] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.395904][ T6808] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.405205][ T6808] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.414061][ T6808] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.524648][ T6808] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.534140][ T6808] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.543172][ T6808] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.552081][ T6808] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.595202][ T6810] comedi comedi2: comedi_config --init_data is deprecated [ 179.368865][ T6809] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.377686][ T6809] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.386398][ T6809] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.395171][ T6809] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.936877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 180.220236][ T5819] net_ratelimit: 3 callbacks suppressed [ 180.220248][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.672337][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.747335][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.777838][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.938938][ T6809] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.947901][ T6809] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.956892][ T6809] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.966018][ T6809] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.692240][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.729229][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.062928][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 182.157720][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 183.715494][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.843035][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.851215][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.870420][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.971517][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 184.047469][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 184.347206][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.353275][ T5785] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.464568][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 186.011540][ T5818] net_ratelimit: 3 callbacks suppressed [ 186.011553][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.026012][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.038080][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.759469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.946808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.163168][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.176832][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.181373][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.194405][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.366086][ T6890] tipc: Failed to remove unknown binding: 66,1,1/0:1251599999/1251600001 [ 188.620770][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 189.227496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.797321][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 190.166652][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 191.477076][ C1] net_ratelimit: 8 callbacks suppressed [ 191.477094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.824430][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.830625][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 191.830694][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 191.853037][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.861587][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.906696][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.915000][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.987038][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.995458][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.041516][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.261937][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.576359][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.586769][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.593486][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.624004][ T6957] loop1: detected capacity change from 0 to 8192 [ 195.641993][ T6957] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.656738][ T6957] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 195.666072][ T6957] REISERFS (device loop1): using ordered data mode [ 195.672825][ T6957] reiserfs: using flush barriers [ 195.682175][ T6957] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.747411][ T6957] REISERFS (device loop1): checking transaction log (loop1) [ 195.829790][ T6957] REISERFS (device loop1): Using r5 hash to sort names [ 195.846234][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 195.922814][ T6957] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 197.155930][ T5159] net_ratelimit: 6 callbacks suppressed [ 197.155946][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.257148][ T6970] netlink: 256 bytes leftover after parsing attributes in process `syz.1.262'. [ 198.266580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 198.588095][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.596241][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.596251][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.612472][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.869755][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.474257][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.685162][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.706766][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.748717][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.302634][ T5787] Bluetooth: hci2: unexpected event for opcode 0x007f [ 202.399419][ T7022] net_ratelimit: 4 callbacks suppressed [ 202.399433][ T7022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.457223][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.711455][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.898278][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 203.294506][ T7039] netlink: 180 bytes leftover after parsing attributes in process `syz.0.270'. [ 203.466611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.376543][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.506546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.580323][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.598449][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.616865][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.645965][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.457383][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 206.994671][ T5787] Bluetooth: hci0: unexpected event for opcode 0x007f [ 207.626742][ T5883] net_ratelimit: 4 callbacks suppressed [ 207.626755][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.707533][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.732324][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.162142][ T5787] Bluetooth: hci3: unexpected event for opcode 0x007f [ 208.225773][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 208.268888][ T7080] loop2: detected capacity change from 0 to 8192 [ 208.296713][ T7087] netlink: 'syz.3.282': attribute type 12 has an invalid length. [ 208.316150][ T7087] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.323805][ T7080] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.343132][ T7080] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 208.352813][ T7080] REISERFS (device loop2): using ordered data mode [ 208.360504][ T7080] reiserfs: using flush barriers [ 208.367611][ T7080] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.385317][ T7080] REISERFS (device loop2): checking transaction log (loop2) [ 208.394063][ T7080] REISERFS (device loop2): Using r5 hash to sort names [ 208.401416][ T7080] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 209.644763][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.770970][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.606598][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.075093][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.229250][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.715692][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 213.306869][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.317208][ T7127] netlink: 'syz.3.292': attribute type 12 has an invalid length. [ 213.344564][ T7127] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.546847][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.646566][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.408461][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.857202][ T787] Process accounting resumed [ 215.898778][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.317231][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.574995][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.023630][ T7181] netlink: 'syz.0.301': attribute type 12 has an invalid length. [ 218.059922][ T7181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.154933][ T7184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.698642][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.226591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.414253][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 220.020356][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.144656][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.276541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.357314][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.003013][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.316396][ T7221] bond0: (slave wlan1): Releasing backup interface [ 223.112749][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.139436][ T7235] netlink: 'syz.0.310': attribute type 12 has an invalid length. [ 223.149028][ T7235] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 223.386722][ T5787] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 223.387439][ T7241] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.403584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.449353][ T7241] input: syz0 as /devices/virtual/input/input6 [ 223.755583][ T7248] loop2: detected capacity change from 0 to 128 [ 223.813049][ T7248] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.871432][ T7248] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.903348][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.734282][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.982405][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.840238][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.284122][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.667665][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.766351][ T7281] netlink: 'syz.1.321': attribute type 12 has an invalid length. [ 227.778091][ T7281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 228.600637][ T7287] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.609708][ T7287] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.618570][ T7287] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.627370][ T7287] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.663381][ T7287] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.672589][ T7287] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.682209][ T7287] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.691209][ T7287] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.790829][ T7289] comedi comedi2: comedi_config --init_data is deprecated [ 229.281376][ T7288] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.290236][ T7288] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.299733][ T7288] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.308581][ T7288] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.420142][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.621880][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.769106][ T7288] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.778215][ T7288] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.787395][ T7288] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.796273][ T7288] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.348954][ T7293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 230.457804][ T7302] GUP no longer grows the stack in syz.2.325 (7302): 200000006000-200000008000 (200000004000) [ 230.468851][ T7302] CPU: 0 PID: 7302 Comm: syz.2.325 Not tainted syzkaller #0 [ 230.476153][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.486219][ T7302] Call Trace: [ 230.489498][ T7302] [ 230.492424][ T7302] dump_stack_lvl+0x18c/0x250 [ 230.497112][ T7302] ? show_regs_print_info+0x20/0x20 [ 230.502308][ T7302] ? load_image+0x420/0x420 [ 230.506806][ T7302] ? find_vma+0x134/0x1b0 [ 230.511145][ T7302] fixup_user_fault+0x642/0x700 [ 230.516007][ T7302] fault_in_user_writeable+0x71/0xd0 [ 230.521288][ T7302] futex_lock_pi+0x274/0x9b0 [ 230.525978][ T7302] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 230.531392][ T7302] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 230.536938][ T7302] ? mas_find_setup+0x493/0x590 [ 230.541787][ T7302] do_futex+0x23d/0x3e0 [ 230.545953][ T7302] ? __ia32_sys_get_robust_list+0x110/0x110 [ 230.551856][ T7302] __se_sys_futex+0x3a9/0x440 [ 230.556537][ T7302] ? __x64_sys_futex+0xf0/0xf0 [ 230.561300][ T7302] ? __x64_sys_futex+0x21/0xf0 [ 230.566061][ T7302] do_syscall_64+0x55/0xb0 [ 230.570491][ T7302] ? clear_bhb_loop+0x40/0x90 [ 230.575171][ T7302] ? clear_bhb_loop+0x40/0x90 [ 230.579855][ T7302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.585750][ T7302] RIP: 0033:0x7f9c19b9ce59 [ 230.590181][ T7302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.609789][ T7302] RSP: 002b:00007f9c1aa75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.618208][ T7302] RAX: ffffffffffffffda RBX: 00007f9c19e16180 RCX: 00007f9c19b9ce59 [ 230.626177][ T7302] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 230.634147][ T7302] RBP: 00007f9c19c32d6f R08: 0000000000000000 R09: 0000000000000002 [ 230.642115][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.650079][ T7302] R13: 00007f9c19e16218 R14: 00007f9c19e16180 R15: 00007ffcd762e178 [ 230.658069][ T7302] [ 230.661319][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.309309][ T5787] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 231.313778][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.325205][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.333369][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.473193][ T7296] netlink: 'syz.0.332': attribute type 12 has an invalid length. [ 231.598065][ T7299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.650137][ T7293] input: syz0 as /devices/virtual/input/input7 [ 232.590195][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.772501][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 233.704760][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.697878][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.816411][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.505919][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 235.772258][ T7338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.641121][ T7337] loop3: detected capacity change from 0 to 256 [ 236.719302][ T7337] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 237.445290][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.706834][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.623696][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.923701][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.979805][ T7358] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.988670][ T7358] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.997502][ T7358] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.006214][ T7358] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.113659][ T7360] comedi comedi2: comedi_config --init_data is deprecated [ 240.200054][ T7358] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.209116][ T7358] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.218097][ T7358] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.227027][ T7358] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.426860][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.568243][ T7359] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.577369][ T7359] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.586091][ T7359] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.594841][ T7359] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.913392][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.001560][ T7359] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.010558][ T7359] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.019771][ T7359] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.028729][ T7359] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.023568][ T7365] netlink: 'syz.3.338': attribute type 12 has an invalid length. [ 242.215378][ T7368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 242.988343][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.005437][ T2941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.014318][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.023980][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.362751][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.433071][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.941689][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 246.588988][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.591537][ T7402] netlink: 256 bytes leftover after parsing attributes in process `syz.0.349'. [ 248.601198][ T7402] unsupported nlmsg_type 40 [ 248.659561][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.691826][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.746938][ T6050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.756287][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.909788][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.026982][ T7412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.084490][ T7413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.021652][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.042186][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.331886][ T7422] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.340704][ T7422] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.349537][ T7422] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.358247][ T7422] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.242994][ T7422] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.252222][ T7422] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.261196][ T7422] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.270144][ T7422] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.395934][ T7429] syz_tun: entered allmulticast mode [ 251.707711][ T967] net_ratelimit: 3 callbacks suppressed [ 251.707725][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.196097][ T7436] netlink: 'syz.1.355': attribute type 12 has an invalid length. [ 252.197907][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.243125][ T7436] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.256638][ T7428] syz_tun: left allmulticast mode [ 253.832002][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 253.966895][ T7450] loop3: detected capacity change from 0 to 128 [ 255.725233][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.966163][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976603][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.414206][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.423795][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.437364][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.446578][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.715446][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.766044][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.878226][ T5787] Bluetooth: hci0: unexpected event for opcode 0x007f [ 259.323122][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 259.466857][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.820210][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.931305][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.986244][ T5787] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 261.186857][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.377623][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.508054][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.626234][ T7497] netlink: 'syz.1.368': attribute type 12 has an invalid length. [ 262.642495][ T7497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 262.662998][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 263.320280][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 263.899137][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.064542][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 264.241420][ T5787] Bluetooth: hci3: unexpected event for opcode 0x007f [ 264.975943][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.727483][ T7533] use of bytesused == 0 is deprecated and will be removed in the future, [ 265.736395][ T7533] use the actual size instead. [ 266.138817][ T7532] kernel profiling enabled (shift: 9) [ 266.334732][ T7535] nfs4: Unknown parameter 'no' [ 266.393794][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.749231][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.860046][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.801499][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.022162][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 268.050316][ T8] IPVS: starting estimator thread 0... [ 268.136736][ T7549] IPVS: using max 19 ests per chain, 45600 per kthread [ 268.198606][ T7551] netlink: 'syz.3.381': attribute type 12 has an invalid length. [ 268.218819][ T7551] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 269.183443][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.227889][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.323850][ T5787] Bluetooth: hci0: unexpected event for opcode 0x007f [ 269.415745][ T7567] loop2: detected capacity change from 0 to 128 [ 269.575227][ T7567] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.593948][ T7567] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.893874][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.228526][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 270.238871][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.314161][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.808995][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.968271][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.086705][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.196391][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 273.532831][ T7599] netlink: 'syz.3.393': attribute type 12 has an invalid length. [ 273.545121][ T7599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.601979][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 274.589111][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.603220][ T7619] random: crng reseeded on system resumption [ 275.626820][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.193031][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.833623][ T5159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.158945][ T51] Bluetooth: hci0: unexpected event for opcode 0x041b [ 277.875666][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.954407][ T7636] loop2: detected capacity change from 0 to 512 [ 277.979451][ T7636] EXT4-fs (loop2): Test dummy encryption mode enabled [ 278.140959][ T7638] nfs4: Unknown parameter 'no' [ 278.333232][ T7636] EXT4-fs (loop2): 1 truncate cleaned up [ 278.434549][ T51] Bluetooth: hci0: unexpected event for opcode 0x007f [ 278.547172][ T7636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.951803][ T7645] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 278.958811][ T7645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.966692][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.976306][ T7645] vhci_hcd vhci_hcd.0: Device attached [ 279.092811][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.264080][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 279.385162][ T7646] vhci_hcd: connection closed [ 279.524589][ T59] vhci_hcd: stop threads [ 279.563472][ T5159] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 279.593966][ T59] vhci_hcd: release socket [ 279.610704][ T5822] IPVS: starting estimator thread 0... [ 279.641200][ T59] vhci_hcd: disconnect device [ 279.756679][ T7653] IPVS: using max 18 ests per chain, 43200 per kthread [ 279.841821][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.941660][ T7658] syz_tun: entered allmulticast mode [ 280.200439][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.697898][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.806054][ T7657] syz_tun: left allmulticast mode [ 280.914504][ T7668] netlink: 'syz.2.404': attribute type 12 has an invalid length. [ 280.926257][ T7668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.693030][ T7677] loop1: detected capacity change from 0 to 512 [ 281.848987][ T7677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.880470][ T7677] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.961706][ T7682] loop3: detected capacity change from 0 to 256 [ 281.981788][ T7682] ======================================================= [ 281.981788][ T7682] WARNING: The mand mount option has been deprecated and [ 281.981788][ T7682] and is ignored by this kernel. Remove the mand [ 281.981788][ T7682] option from the mount to silence this warning. [ 281.981788][ T7682] ======================================================= [ 282.365932][ T7686] syz.1.407 uses obsolete (PF_INET,SOCK_PACKET) [ 282.969038][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.744709][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 284.763380][ T5159] vhci_hcd: vhci_device speed not set [ 284.881582][ T51] Bluetooth: hci1: unexpected event for opcode 0x007f [ 288.130689][ T7729] /dev/nullb0: Can't lookup blockdev [ 290.099407][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 290.340197][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 290.475871][ T7750] fuse: Bad value for 'fd' [ 291.982988][ T51] Bluetooth: hci0: unexpected event for opcode 0x007f [ 294.663597][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 296.316078][ T7799] loop1: detected capacity change from 0 to 128 [ 296.399925][ T7797] nfs4: Unknown parameter 'no' [ 298.113894][ T51] Bluetooth: hci2: unexpected event for opcode 0x007f [ 298.841009][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 299.119119][ T7811] ------------[ cut here ]------------ [ 299.124875][ T7811] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 299.132495][ T7811] WARNING: CPU: 1 PID: 7811 at net/mac80211/main.c:291 ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.143386][ T7811] Modules linked in: [ 299.147387][ T7811] CPU: 1 PID: 7811 Comm: syz.1.438 Not tainted syzkaller #0 [ 299.154657][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.164750][ T7811] RIP: 0010:ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.172009][ T7811] Code: 74 05 e8 33 3c ea f7 49 8b 86 10 09 00 00 49 8d b6 30 09 00 00 48 85 c0 48 0f 45 f0 48 c7 c7 a0 c4 de 8b 89 ea e8 60 ae 5b f7 <0f> 0b e9 f8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 3c fe ff [ 299.191708][ T7811] RSP: 0018:ffffc90004a3fab0 EFLAGS: 00010246 [ 299.197805][ T7811] RAX: 0aa06bd27c9f6200 RBX: 0000000000040000 RCX: 0000000000080000 [ 299.205769][ T7811] RDX: ffffc9000cae9000 RSI: 00000000000077bb RDI: 00000000000077bc [ 299.213793][ T7811] RBP: 0000000000000000 R08: ffffc90004a3f6a7 R09: 1ffff92000947ed4 [ 299.221991][ T7811] R10: dffffc0000000000 R11: fffff52000947ed5 R12: dffffc0000000000 [ 299.230302][ T7811] R13: ffff88805bc915a0 R14: ffff88805bc90c80 R15: ffff88805bc91598 [ 299.238525][ T7811] FS: 00007f8468add6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 299.247527][ T7811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.254105][ T7811] CR2: 0000000000000000 CR3: 000000005ce70000 CR4: 00000000003506e0 [ 299.262117][ T7811] Call Trace: [ 299.265398][ T7811] [ 299.268359][ T7811] ieee80211_set_tx_power+0x28f/0x960 [ 299.273748][ T7811] ? rfkill_set_sw_state+0x217/0x280 [ 299.279139][ T7811] cfg80211_wext_siwtxpower+0x32f/0x500 [ 299.284715][ T7811] ? cfg80211_wext_giwrate+0x440/0x440 [ 299.290234][ T7811] ioctl_standard_call+0xd8/0x2b0 [ 299.295265][ T7811] ? cfg80211_wext_giwrate+0x440/0x440 [ 299.300736][ T7811] wext_ioctl_dispatch+0x1cb/0x600 [ 299.305835][ T7811] ? wext_ioctl_dispatch+0x600/0x600 [ 299.311205][ T7811] ? iw_handler_get_private+0x1f0/0x1f0 [ 299.316788][ T7811] ? wext_handle_ioctl+0x1d0/0x1d0 [ 299.321888][ T7811] ? __might_fault+0xaa/0x120 [ 299.326594][ T7811] ? __might_fault+0xc6/0x120 [ 299.331259][ T7811] ? __might_fault+0xaa/0x120 [ 299.336208][ T7811] wext_handle_ioctl+0x117/0x1d0 [ 299.341213][ T7811] ? call_commit_handler+0xf0/0xf0 [ 299.346318][ T7811] sock_ioctl+0x15d/0x7e0 [ 299.350686][ T7811] ? sock_poll+0x3e0/0x3e0 [ 299.355096][ T7811] ? bpf_lsm_file_ioctl+0x9/0x10 [ 299.360063][ T7811] ? security_file_ioctl+0x80/0xa0 [ 299.365156][ T7811] ? sock_poll+0x3e0/0x3e0 [ 299.369627][ T7811] __se_sys_ioctl+0xfd/0x170 [ 299.374216][ T7811] do_syscall_64+0x55/0xb0 [ 299.378640][ T7811] ? clear_bhb_loop+0x40/0x90 [ 299.383305][ T7811] ? clear_bhb_loop+0x40/0x90 [ 299.388005][ T7811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.393886][ T7811] RIP: 0033:0x7f8467b9ce59 [ 299.398328][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.417965][ T7811] RSP: 002b:00007f8468add028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.426365][ T7811] RAX: ffffffffffffffda RBX: 00007f8467e15fa0 RCX: 00007f8467b9ce59 [ 299.434395][ T7811] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000009 [ 299.442583][ T7811] RBP: 00007f8467c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.450574][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.458589][ T7811] R13: 00007f8467e16038 R14: 00007f8467e15fa0 R15: 00007ffdf85d1d08 [ 299.466600][ T7811] [ 299.469605][ T7811] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.476867][ T7811] CPU: 1 PID: 7811 Comm: syz.1.438 Not tainted syzkaller #0 [ 299.484126][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.494161][ T7811] Call Trace: [ 299.497425][ T7811] [ 299.500337][ T7811] dump_stack_lvl+0x18c/0x250 [ 299.505003][ T7811] ? show_regs_print_info+0x20/0x20 [ 299.510185][ T7811] ? load_image+0x420/0x420 [ 299.514671][ T7811] panic+0x2dc/0x730 [ 299.518554][ T7811] ? bpf_jit_dump+0xd0/0xd0 [ 299.523831][ T7811] __warn+0x2e0/0x470 [ 299.527802][ T7811] ? ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.534290][ T7811] ? ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.540787][ T7811] report_bug+0x2be/0x4f0 [ 299.545099][ T7811] ? ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.551583][ T7811] ? ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.558065][ T7811] ? ieee80211_link_info_change_notify+0x252/0x2f0 [ 299.564547][ T7811] handle_bug+0xcf/0x120 [ 299.568773][ T7811] exc_invalid_op+0x1a/0x50 [ 299.573256][ T7811] asm_exc_invalid_op+0x1a/0x20 [ 299.578096][ T7811] RIP: 0010:ieee80211_link_info_change_notify+0x250/0x2f0 [ 299.585193][ T7811] Code: 74 05 e8 33 3c ea f7 49 8b 86 10 09 00 00 49 8d b6 30 09 00 00 48 85 c0 48 0f 45 f0 48 c7 c7 a0 c4 de 8b 89 ea e8 60 ae 5b f7 <0f> 0b e9 f8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 3c fe ff [ 299.604796][ T7811] RSP: 0018:ffffc90004a3fab0 EFLAGS: 00010246 [ 299.610861][ T7811] RAX: 0aa06bd27c9f6200 RBX: 0000000000040000 RCX: 0000000000080000 [ 299.618823][ T7811] RDX: ffffc9000cae9000 RSI: 00000000000077bb RDI: 00000000000077bc [ 299.626780][ T7811] RBP: 0000000000000000 R08: ffffc90004a3f6a7 R09: 1ffff92000947ed4 [ 299.634736][ T7811] R10: dffffc0000000000 R11: fffff52000947ed5 R12: dffffc0000000000 [ 299.642694][ T7811] R13: ffff88805bc915a0 R14: ffff88805bc90c80 R15: ffff88805bc91598 [ 299.650674][ T7811] ieee80211_set_tx_power+0x28f/0x960 [ 299.656994][ T7811] ? rfkill_set_sw_state+0x217/0x280 [ 299.667199][ T7811] cfg80211_wext_siwtxpower+0x32f/0x500 [ 299.672740][ T7811] ? cfg80211_wext_giwrate+0x440/0x440 [ 299.678182][ T7811] ioctl_standard_call+0xd8/0x2b0 [ 299.683192][ T7811] ? cfg80211_wext_giwrate+0x440/0x440 [ 299.688636][ T7811] wext_ioctl_dispatch+0x1cb/0x600 [ 299.693761][ T7811] ? wext_ioctl_dispatch+0x600/0x600 [ 299.699030][ T7811] ? iw_handler_get_private+0x1f0/0x1f0 [ 299.704558][ T7811] ? wext_handle_ioctl+0x1d0/0x1d0 [ 299.709649][ T7811] ? __might_fault+0xaa/0x120 [ 299.714308][ T7811] ? __might_fault+0xc6/0x120 [ 299.719053][ T7811] ? __might_fault+0xaa/0x120 [ 299.723717][ T7811] wext_handle_ioctl+0x117/0x1d0 [ 299.728639][ T7811] ? call_commit_handler+0xf0/0xf0 [ 299.733740][ T7811] sock_ioctl+0x15d/0x7e0 [ 299.738059][ T7811] ? sock_poll+0x3e0/0x3e0 [ 299.742549][ T7811] ? bpf_lsm_file_ioctl+0x9/0x10 [ 299.747467][ T7811] ? security_file_ioctl+0x80/0xa0 [ 299.752560][ T7811] ? sock_poll+0x3e0/0x3e0 [ 299.756962][ T7811] __se_sys_ioctl+0xfd/0x170 [ 299.761540][ T7811] do_syscall_64+0x55/0xb0 [ 299.765937][ T7811] ? clear_bhb_loop+0x40/0x90 [ 299.770597][ T7811] ? clear_bhb_loop+0x40/0x90 [ 299.775259][ T7811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.781145][ T7811] RIP: 0033:0x7f8467b9ce59 [ 299.785543][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.805142][ T7811] RSP: 002b:00007f8468add028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.813543][ T7811] RAX: ffffffffffffffda RBX: 00007f8467e15fa0 RCX: 00007f8467b9ce59 [ 299.821502][ T7811] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000009 [ 299.829459][ T7811] RBP: 00007f8467c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.837413][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.845362][ T7811] R13: 00007f8467e16038 R14: 00007f8467e15fa0 R15: 00007ffdf85d1d08 [ 299.853483][ T7811] [ 299.856741][ T7811] Kernel Offset: disabled [ 299.861147][ T7811] Rebooting in 86400 seconds..